This script is Copyright (C) 2006-2013 Tenable Network Security, Inc.
The remote host contains an application that is affected by a remote
code execution flaw.
The remote host is running iTunes, a popular jukebox program.
The remote version of this software is vulnerable to an integer
overflow when it parses specially crafted AAC files which may lead to
the execution of arbitrary code.
An attacker may exploit this flaw by sending a malformed AAC file to a
user on the remote host and wait for him to play it with iTunes.
See also :
Upgrade to iTunes 6.0.5 or newer
Risk factor :
Medium / CVSS Base Score : 5.1
CVSS Temporal Score : 3.8
Public Exploit Available : false
Family: MacOS X Local Security Checks
Nessus Plugin ID: 21781 (macosx_iTunes_Overflow3.nasl)
Bugtraq ID: 18730
CVE ID: CVE-2006-1467
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.